The cryptocurrency market is facing one of the biggest security crises in its history. Binance, the world's largest cryptocurrency exchange, has fallen victim to a massive cyberattack, with the total scale of the incident estimated at approximately USD 6.3 billion. According to preliminary findings, the attack may have originated from the compromise of a laptop belonging to one of the exchange's engineers, allowing hackers to gain access to internal systems and carry out unauthorized withdrawals. Binance has stated that it has so far found no evidence of private wallet keys being compromised.
In response to the incident, the exchange temporarily suspended deposits and withdrawals and began cooperating with law enforcement agencies and blockchain security firms. So far, approximately USD 3 billion in stolen assets has been frozen, primarily through the efforts of stablecoin issuers such as Tether and Circle. However, this means that the fate of the remaining approximately USD 3.3 billion remains uncertain.
Particular concerns have been raised over how Binance intends to cover the potential losses. The exchange has assured users that they will not suffer any financial consequences as a result of the attack and that all losses will be covered by its emergency SAFU fund and the company's own resources. The problem is that the SAFU fund itself holds assets worth approximately USD 1 billion, making it significantly smaller than the scale of the potential losses. This means Binance will also have to commit substantial amounts of its own capital to fulfil its assurances.
The attack has also triggered a strong reaction across the cryptocurrency market. Bitcoin fell to its lowest level in approximately six weeks, while Ethereum and BNB also came under significant selling pressure. The incident has once again undermined investor confidence in the security of centralized exchanges and heightened concerns about the risks associated with holding large amounts of capital on such platforms.
The effects of the incident could be felt across the broader market for some time. The suspension of withdrawals and reduced liquidity on Binance could lead to wider spreads, restrictions on leveraged trading and forced liquidations on other platforms. The restoration of investor confidence will depend primarily on recovering the stolen assets, establishing the causes of the attack and restoring the exchange's full functionality.
It is also worth putting the scale of this event into a broader historical context. Until now, one of the largest attacks in cryptocurrency history was the theft of approximately USD 1.5 billion from the Bybit exchange in February 2025. Other major incidents have included the attack on the Ronin network, during which approximately USD 540 million was stolen, and the collapse of the Mt. Gox exchange, which was associated with the loss of cryptocurrencies worth nearly USD 500 million. The current Binance incident significantly exceeds these cases and once again raises serious questions about the security of funds held on centralized cryptocurrency exchanges.
Source: XTB Reserach
Source: XTB Reserach
Economic Calendar: Preliminary European GDP and German Inflation in Market Focus
Morning Wrap: Wall Street's Tech Slowdown: Massive AI Investments Spark Growing Concerns
Daily Summary: Bloody Thursday on Wall Street: Nasdaq Leads the Sell-Off
Silver falls, testing the $52 Level
The content of this report has been created by XTB S.A., with its registered office in Warsaw, at Prosta 67, 00-838 Warsaw, Poland, (KRS number 0000217580) and supervised by Polish Supervision Authority ( No. DDM-M-4021-57-1/2005). This material is a marketing communication within the meaning of Art. 24 (3) of Directive 2014/65/EU of the European Parliament and of the Council of 15 May 2014 on markets in financial instruments and amending Directive 2002/92/EC and Directive 2011/61/EU (MiFID II). Marketing communication is not an investment recommendation or information recommending or suggesting an investment strategy within the meaning of Regulation (EU) No 596/2014 of the European Parliament and of the Council of 16 April 2014 on market abuse (market abuse regulation) and repealing Directive 2003/6/EC of the European Parliament and of the Council and Commission Directives 2003/124/EC, 2003/125/EC and 2004/72/EC and Commission Delegated Regulation (EU) 2016/958 of 9 March 2016 supplementing Regulation (EU) No 596/2014 of the European Parliament and of the Council with regard to regulatory technical standards for the technical arrangements for objective presentation of investment recommendations or other information recommending or suggesting an investment strategy and for disclosure of particular interests or indications of conflicts of interest or any other advice, including in the area of investment advisory, within the meaning of the Trading in Financial Instruments Act of 29 July 2005 (i.e. Journal of Laws 2019, item 875, as amended). The marketing communication is prepared with the highest diligence, objectivity, presents the facts known to the author on the date of preparation and is devoid of any evaluation elements. The marketing communication is prepared without considering the client’s needs, his individual financial situation and does not present any investment strategy in any way. The marketing communication does not constitute an offer of sale, offering, subscription, invitation to purchase, advertisement or promotion of any financial instruments. XTB S.A. is not liable for any client’s actions or omissions, in particular for the acquisition or disposal of financial instruments, undertaken on the basis of the information contained in this marketing communication. In the event that the marketing communication contains any information about any results regarding the financial instruments indicated therein, these do not constitute any guarantee or forecast regarding the future results.